This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/EPm1u1dJgYoTbNI80mTBhYkEcqs.roa File: EPm1u1dJgYoTbNI80mTBhYkEcqs.roa (raw, json) Hash identifier: KsEbKma2UWb8xEPEBQMHTxAAbTdu2Rgtnk9hAeBq/48= Subject key identifier: 10:F9:B5:BB:57:49:81:8A:13:6C:D2:3C:D2:64:C1:85:89:04:72:AB Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Certificate serial: 019B79ECA8963F8A545E3E8B2E21D7F2BE18 Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/EPm1u1dJgYoTbNI80mTBhYkEcqs.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44018 IP address blocks: 193.104.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a8:96:3f:8a:54:5e:3e:8b:2e:21:d7:f2:be:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10f9b5bb5749818a136cd23cd264c185890472ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:c9:73:5f:7b:f6:05:b0:c9:03:d2:eb:5d: 98:43:c9:53:a9:ff:62:59:12:63:c2:40:00:a6:21: ad:ab:ce:68:3d:0f:df:76:b1:14:d2:6e:fa:db:ff: 4e:b7:81:b8:81:84:35:f3:78:d7:74:f6:55:cd:ab: 44:56:23:33:98:1b:16:ed:8a:f3:e8:74:72:76:1a: 1f:d1:5e:9d:94:f5:23:49:da:5c:c6:c7:38:44:a1: 4f:36:b4:52:2d:9c:5a:42:eb:5a:71:03:26:12:1b: 4c:01:10:ba:b4:e6:3a:4b:11:c9:99:32:e3:71:8d: bb:8b:7b:f4:86:b0:24:09:a5:c9:f6:07:0d:3d:b2: ef:1d:9c:12:7d:34:77:8e:16:a3:dd:16:0f:14:2e: 86:0a:8e:27:21:a8:17:21:3a:5c:b7:70:b3:02:77: 55:8d:50:ef:b5:89:15:7a:1b:0e:39:cb:c6:c5:7b: dc:f0:8f:d4:91:e9:9e:cb:6e:06:fd:f1:47:b9:6d: e4:2c:99:fa:5f:aa:62:b3:20:2c:9f:fa:ae:72:39: f3:b7:07:27:24:85:36:a4:c1:05:8f:d8:0d:fd:51: 1a:fe:11:6d:71:bd:40:81:de:72:68:19:c1:59:21: bb:de:31:c7:e2:e2:f2:f0:93:0f:87:91:89:6f:35: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F9:B5:BB:57:49:81:8A:13:6C:D2:3C:D2:64:C1:85:89:04:72:AB X509v3 Authority Key Identifier: keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/EPm1u1dJgYoTbNI80mTBhYkEcqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.146.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:a2:09:a9:09:5a:02:70:cc:cc:bc:c8:1b:08:8e:bd:08:c4: 22:df:1e:9c:3c:f2:b4:ee:53:00:36:1d:42:62:84:f5:8f:f2: e4:b0:8c:01:02:f7:5f:c2:e1:4c:b8:28:3a:12:12:09:63:d8: b0:ca:37:36:c0:7c:61:00:85:bb:f0:26:3d:21:bf:84:8c:6c: c4:1f:aa:28:ff:97:75:0d:d6:f4:76:d5:43:89:39:31:4f:f1: 22:84:77:40:35:24:2a:a7:6d:7d:9a:ff:ef:f2:8e:1f:54:3d: f5:b0:04:d2:20:01:04:03:c7:40:d0:ac:78:06:bb:00:7e:4d: 11:a1:09:28:0a:da:a7:65:b3:46:a6:c9:24:f2:6b:fd:27:b8: 04:b9:b5:e2:26:e1:f8:18:ae:f9:56:62:f8:3a:ef:0d:09:2c: f1:4b:7d:d9:62:be:50:77:f5:7c:fb:c3:6b:28:11:c1:13:54: 74:0b:5e:fd:12:c9:a8:e8:e2:67:43:22:7c:9f:84:da:42:1f: e9:5c:e2:2a:a4:3d:5d:70:82:c5:5d:25:fc:30:8a:a0:22:65: 6d:65:b9:dd:18:9a:80:ee:2a:30:4c:04:ac:87:b4:ea:12:19: 6e:c3:da:0b:8f:0e:0f:68:9a:c5:09:a9:ec:21:f3:6e:7c:3f: 99:87:ab:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KiWP4pUXj6LLiHX8r4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1 N2NmMGYwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGY5YjViYjU3NDk4MThhMTM2Y2QyM2NkMjY0YzE4NTg5MDQ3MmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfzJc1979gWwyQPS612YQ8lTqf9i WRJjwkAApiGtq85oPQ/fdrEU0m762/9Ot4G4gYQ183jXdPZVzatEViMzmBsW7Yrz 6HRydhof0V6dlPUjSdpcxsc4RKFPNrRSLZxaQutacQMmEhtMARC6tOY6SxHJmTLj cY27i3v0hrAkCaXJ9gcNPbLvHZwSfTR3jhaj3RYPFC6GCo4nIagXITpct3CzAndV jVDvtYkVehsOOcvGxXvc8I/Ukemey24G/fFHuW3kLJn6X6pisyAsn/qucjnztwcn JIU2pMEFj9gN/VEa/hFtcb1Agd5yaBnBWSG73jHH4uLy8JMPh5GJbzUeWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBD5tbtXSYGKE2zSPNJkwYWJBHKrMB8GA1UdIwQY MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt YmJjYWUwZGYxZjJmLzEvRVBtMXUxZEpnWW9UYk5JODBtVEJoWWtFY3FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiSMA0G CSqGSIb3DQEBCwUAA4IBAQBeogmpCVoCcMzMvMgbCI69CMQi3x6cPPK07lMANh1C YoT1j/LksIwBAvdfwuFMuCg6EhIJY9iwyjc2wHxhAIW78CY9Ib+EjGzEH6oo/5d1 Ddb0dtVDiTkxT/EihHdANSQqp219mv/v8o4fVD31sATSIAEEA8dA0Kx4BrsAfk0R oQkoCtqnZbNGpskk8mv9J7gEubXiJuH4GK75VmL4Ou8NCSzxS33ZYr5Qd/V8+8Nr KBHBE1R0C179Esmo6OJnQyJ8n4TaQh/pXOIqpD1dcILFXSX8MIqgImVtZbndGJqA 7iowTASsh7TqEhluw9oLjw4PaJrFCansIfNufD+Zh6t2 -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:42 2026 by rpki-client